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20 June 1980 

MEMORANDUM FOR: Director of Central Intelligence 
THROUGH : Deputy Director of Central Intelligence 

FROM : 

SA to the DCI for Compartmentation 

SUBJECT : APEX - Two Person Rule 
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1. This memorandum requests that you rethink your support 
for the "two person rule." Paragraph 11 contains a recommendation. 

2. Both the APEX Security Policy Manuals for Government and 
for Industry explicitly require a "two person rule" which is that 
a ^T APEX Control Facilities must be staffed by at least two persons, 
properly indoctrinated for the information held in the particular 
facility. The rule is no different for an office that holds three 
persons in OER or an industrial bay in which hundreds of people are 
fabricating equipment. SIOs may grant exceptions. 

3. Both manuals have been approved by NFIB and you, and are 
about to go to the printer. 

4. Before printing, I recommend that you reconsider what I 

understand to^be your very strong support for the "two perso n rule ." 
I have not raised the problem before because, beginning xvith | | 

l a ^E have told me that you vigorously support the "two person" 
concept . 


STAT 


_ S . The problem with the "two person” rule as a hard and fast 
law is that it is too costly and unrealistic. You, for example, 
violate it whenever you close the door to your office. That may be 
silly, but what about the president of Lockheed? Under the "two 
person" rule, I cannot stay late to finish this memorandum unless I 
keep someone else here. The rule would require that two persons be 
called into the CIA Document Library if someone decides that a 
particular document dated 1978 is needed at midnight. If Maurice 
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Ernest is burning midnight oil over your next Presidential Briefing 
on Energy, he will have to have someone physically in his office. 

6. The members of the APEX Steering Group oppose a generalized 
"two person" rule and have been forceful in their opposition- -except 
for the CIA-oriented members who believe, as I do, that you demand it. 

I have, to date, simply overridden their objections. Conscience 
demands that I make sure that I understand your position before printing 
20,000 copies. 

7. The argumentation is simple--the "too person" rule is too 
simplistic. It makes no sense to say that you cannot be alone in your 
office, and not much more to have only too persons in an industrial 
bay that is normally occupied by hundreds. The rule is too costly in 
what it will do to the Intelligence Community members in terms of over- 
time or, conversely, to their collective output. SIOs will, perforce, 
grant multitudes of exceptions — a bad thing, and we mil soon lose track 
of the exceptions because of their volume. We should not establish 
rules that we can't live with, and we should enforce those that we 
establish. 

8. The objective of the "too person" rule is to prevent pilfering 
or improper copying of documents. The following paragraph contains 

the existing language in the two Security Policy Manuals and alternative 
language that reduces considerably the actual scope of the "too person" 
rule, but keeps the objective in focus. I recommend that you approve 
the new language because: 

-- it probably can be widely enforced; 

-- it would not require wholesale exceptions; 

-- it might tend to spread the use of poly- 
graphs (but this is a weak argument} ; 

it would hold down the operating and imple- 
menting costs of APEX; 

-- and even blind adherence to "two person" rule, 
as written, does not guarantee the desired 
protection. 

9. The texts of the "too person" rule provisions of the APEX 
Government and Industiy Manuals, and the proposed revised language 
for both, follow: 
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Government Manual (Existing) 

To provide proper security and safety protection 
to APEX materials, all ACFs will be staffed by at 
least two persons when in use. Persons selected 
to work in such areas will be chosen on the basis 
of proven reliability, maturity, and having current 
access to APEX. Waivers to the two -person rule 
may be granted by SIOs of the Intelligence Community 
and must be reported to the APEX Control Staff. 


Industry Manual (Existing) 

To provide security and safety protection to APEX 
materials, all CACFs will be occupied by at least 
two APEX indoctrinated persons when in use. Persons 
selected to work in such areas will be chosen on 
the basis of proven reliability and maturity. 


Proposed Revision of "Two Person" Rule 
for both Government and Industry Manual 

As a matter of policy, APEX Control Facilities (ACFs) 
should be staffed with sufficient people to deter 
unauthorized copying or illegal removal of SCI material. 
ACF-designated communication centers, document control 
centers (registries) , and like facilities that handle 
or store quantities of SCI materials must be manned, 
whenever they are in operation, by at least two ap- 
propriately indoctrinated persons in such proximity to 
one another as to provide mutual support in maintaining 
the integrity of the facility and the material stored 
therein. Courier service will be conducted by two 
persons. Contractors will provide two person occupancy 
in all CACFs not specifically excepted by the Government 
sponsor. Routine work by a lone individual in any ACF 
is to be avoided. The granting by an SIO of exceptions 
to this policy should involve consideration of the proven 
reliability and maturity of the persons involved; the 
volume, variety and sensitivity of the holdings in the 
facility; and especially whether or not the persons 
involved are subject to periodic polygraph examinations 
as a condition of access. Exceptions for communications 
centers, document control centers, and the like should be 
granted in only extraordinary circumstances. 
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10. This memorandum has been coordinated with the Director 
of Security and the Executive Sec ret ary/St COM. The APEX Steering 
Group is not aware of it nor is the Security Committee. 

11. Please indicate below your confirmation of the existing 
language as stated in paragraph 9, or your approval of the proposed 
change : 


Keep existing language 


.Modify as proposed 


Other 





24 JLW iSSO 



Approved For 




-RDP85T00788R0001 001 20038-0 




